Skip to contentVulnerabilities with public exploits
- antv layoutantv layout object.js setNestedValue prototype pollutionCVE-2026-15598Public exploit5.3 Medium
- servicenow ai platformSandbox Escape in ServiceNow AI PlatformCVE-2026-6875Public exploit9.5 Critical
- linux, linux kernel +1 morevsock/virtio: fix zerocopy completion for multi-skb sendsCVE-2026-53365Public exploitFix available5.5 Medium
- rejetto hfsRejetto HFS < 3.2.1 Session Forgery via Predictable Signing KeyCVE-2026-61500Public exploit9.3 Critical
- vitec flamingoVitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.phpCVE-2026-60121Public exploit9.3 Critical
- realtyna organic idx pluginWordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerabilityCVE-2026-57811Public exploit10.0 Critical
- ollyo helix ultimate, joomshaper.com helix ultimate extension for joomla +1 moreJoomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7CVE-2026-57830Public exploit8.8 High
- ollyo helix ultimate, joomshaper.com helix ultimate extension for joomla +1 moreJoomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7CVE-2026-57829Public exploit8.7 High
- aojiaozero antarisAojiaoZero Antaris PayPal IPN Payment ipn.php _rewardPurchase sql injectionCVE-2026-15502Public exploit5.3 Medium
- openwrt luciLuCI DHCPv6 Lease Hostname Stored Cross-Site ScriptingCVE-2026-61876Public exploit9.4 Critical
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via CodeAgentCVE-2026-61447Public exploitFix availableEPSS 15.2%10.0 Critical
- rsjoomla rsfiles\!, rsjoomla.com rsfiles extension for joomla +1 moreJoomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12CVE-2026-57827Public exploitEPSS 16.9%10.0 Critical
- xtreeme planyo online reservation systemPlanyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' ParameterCVE-2026-3576Public exploit7.2 High
- apache log4j, apache software foundation log4j api +1 moreApache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()CVE-2026-49844Public exploitFix available6.3 Medium
- rustdeskRustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message InjectionCVE-2026-57850Public exploit8.7 High
- flux159 mcp-server-kubernetesMCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured ToolsCVE-2026-61459Public exploitFix available9.3 Critical
- m2team nanazipNanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fieldsCVE-2026-55781Public exploit2.4 Low
- m2team nanazipNanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry SizeCVE-2026-55780Public exploit2.4 Low
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possibleCVE-2026-59795Public exploit8.1 High
- luceeLucee CFML Server Reflected XSS via URL Path ParsingCVE-2026-29519Public exploit6.2 Medium
- elixir-ecto postgrexSQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of serviceCVE-2026-58225Public exploitFix available2.1 Low
- bitwizard mtrOut-of-bound read in mtrCVE-2026-14461Public exploitFix available5.1 Medium
- logichunt logo slider wp – responsive logo carousel, logo gallery & logo showcaseLogo Slider <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lgx_tooltip_position' ParameterCVE-2026-13247Public exploit6.4 Medium
- sovlix goodmeet – google meet integration for webinar, meeting & video conferenceGoodMeet <= 1.1.8 - Cross-Site Request Forgery to Google Meet Credential Reset via 'goodmeet_reset_google_meet_credential'CVE-2026-6440Public exploit4.3 Medium
- priyanshuchaudhary flowforms – conversational form builderFlowForms <= 1.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Form Modification via REST API '/flowforms/v1/forms/{id}' EndpointsCVE-2026-12400Public exploit4.3 Medium
- samsung mobile devicesOut-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026...CVE-2026-21045Public exploit8.4 High
- outstrip instant appointmentInstant Appointment <= 1.2 - Unauthenticated Arbitrary File UploadCVE-2026-15282Public exploit9.8 Critical
- webrehab super forms – drag & drop form builderSuper Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)CVE-2026-14894Public exploit9.8 Critical
- No product listedAn issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the ...CVE-2026-51119Public exploit9.1 Critical
- yeswikiReflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWikiCVE-2026-52774Public exploitFix available6.1 Medium
- librebookingLibreBooking path traversalCVE-2026-61343Public exploit8.6 High
- metabaseMetabase: Unsafe Deserialization of H2 Query ResultsCVE-2026-59827Public exploit9.9 Critical
- coollabsio coolifyCoolify: OS Command Injection in Health Check Configuration Allows Remote Code ExecutionCVE-2026-59734Public exploit8.8 High
- ruvnet rufloRuflo: Unauthenticated RCE in MCP bridge default docker-compose deploymentCVE-2026-59726Public exploit10.0 Critical
- acymailing, acymailing.com acymailing extension for joomla, datasolution acymailing.com acymailing extension for joomla +2 moreJoomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1CVE-2026-56292Public exploit9.2 Critical
- balbooa forms, balbooa.com balbooa forms extension for joomla +1 moreJoomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1CVE-2026-56291In KEVPublic exploitEPSS 14.9%10.0 Critical
- No product listedUnauthorized use of Kyocera printers, allows all information stored in the Kyocera address book...CVE-2025-63579Public exploit7.5 High
- No product listedIncorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass...CVE-2025-45422Public exploit8.1 High
- hashicorp toolingConsul-template is vulnerable to path redirection in writeToFile through symlink attackCVE-2026-14361Public exploit4.7 Medium
- berriai litellmLiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackCVE-2026-59822In KEVPublic exploitFix available8.8 High
- creative themes blocksy companionBlocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachmentsCVE-2026-58480Public exploit9.2 Critical
- apache software foundation gravitinoApache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameterCVE-2026-41042Public exploit9.1 Critical
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Local Privilege EscalationCVE-2026-57239Public exploit8.2 High
- No product listedAn issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute...CVE-2026-52200Public exploit9.8 Critical
- No product listedAn issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to...CVE-2026-36027Public exploit6.8 Medium
- No product listedImproper authorization in the /tequilapi/config/user endpoint of Mysterium Node before v1.36.0...CVE-2026-31309Public exploit9.8 Critical
- vtiger crmVtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents ModuleCVE-2026-23697Public exploit8.7 High
- vtiger crmVtiger CRM 8.4.0 Authenticated RCE via Module Import File UploadCVE-2026-23698Public exploit8.6 High
- micro-star international (msi) kerncorelib64.sysMSI KernCoreLib64.sys Privilege Escalation via IOCTL HandlersCVE-2026-57851Public exploit8.5 High
- digi international one ia, one sp, one sp ia +1 more +3 moreStored Cross-Site Scripting (XSS)CVE-2026-12948Public exploit4.8 Medium
- Show moreLoading…